From 1d42ab6690bd6aee1055cc8d46e4377c6199b7c3 Mon Sep 17 00:00:00 2001 From: liuwei Date: Wed, 4 Nov 2020 10:29:14 +0800 Subject: [PATCH] add metrics permissions --- .../cluster-manager-registration-clusterrole.yaml | 7 +++++++ pkg/operators/clustermanager/bindata/bindata.go | 7 +++++++ 2 files changed, 14 insertions(+) diff --git a/manifests/cluster-manager/cluster-manager-registration-clusterrole.yaml b/manifests/cluster-manager/cluster-manager-registration-clusterrole.yaml index 2a01ca51c..4cb82d469 100644 --- a/manifests/cluster-manager/cluster-manager-registration-clusterrole.yaml +++ b/manifests/cluster-manager/cluster-manager-registration-clusterrole.yaml @@ -54,3 +54,10 @@ rules: - apiGroups: ["cluster.open-cluster-management.io"] resources: ["managedclustersets/status"] verbs: ["update", "patch"] +# Allow to access metrics API +- apiGroups: ["authentication.k8s.io"] + resources: ["tokenreviews"] + verbs: ["create"] +- apiGroups: ["authorization.k8s.io"] + resources: ["subjectaccessreviews"] + verbs: ["create"] diff --git a/pkg/operators/clustermanager/bindata/bindata.go b/pkg/operators/clustermanager/bindata/bindata.go index dc4c26a66..816f40dca 100644 --- a/pkg/operators/clustermanager/bindata/bindata.go +++ b/pkg/operators/clustermanager/bindata/bindata.go @@ -903,6 +903,13 @@ rules: - apiGroups: ["cluster.open-cluster-management.io"] resources: ["managedclustersets/status"] verbs: ["update", "patch"] +# Allow to access metrics API +- apiGroups: ["authentication.k8s.io"] + resources: ["tokenreviews"] + verbs: ["create"] +- apiGroups: ["authorization.k8s.io"] + resources: ["subjectaccessreviews"] + verbs: ["create"] `) func manifestsClusterManagerClusterManagerRegistrationClusterroleYamlBytes() ([]byte, error) {